Threat Detection Engineer: AI-Driven Cybersecurity & Response

CamWebDir; Cambridge; Remote; GBP 60.000 - 90.000; Vollzeit

Benefits dieser Stelle

23 days holiday

Birthday day off

Private medical insurance

Life insurance

Pension scheme

Enhanced family leave

Cycle to work

Zusammenfassung

Darktrace in Cambridge is seeking a Detection Engineer to join a small global team. You will help develop our threat detection model deck, respond to customer requests and incidents, and review cyber threat intelligence.

You will build new model decks for Endpoint and Kubernetes, analyze incidents, and collaborate with Development, Analyst and customer-facing teams while advancing internal tooling.

Qualifikationen

• Hands-on experience using the Darktrace product suite to carry out thorough investigations, analysing model alerts and traffic.
• Experience with the Platform model editor, assisting customers with creating custom models or tuning existing models.
• Ability to work independently, pro-actively and be self-driven; responsible for driving improvement of the model deck.
• Familiarity with a range of Darktrace products, including Network, Identity, Cloud, Response, Endpoint.
• Strong analytical skills and time management abilities.

Aufgaben

• Build out new model decks to cover areas such as Endpoint and Kubernetes.
• Address customer queries and respond to cyber incidents, prioritising time-sensitive and high-priority issues.
• Analyse cybersecurity incidents to identify areas for improvement of the model deck.
• Self-drive development of new models, and identify areas for improvement of existing models.
• Collaborate with Development, Analyst, and customer-facing teams.
• Develop and enhance internal tooling and processes.

Kenntnisse

Darktrace product suite

Cybersecurity concepts

Analytical skills

Time management

Endpoint telemetry

Programming languages

Tools

GitLab

Jobbeschreibung

Darktrace in Cambridge is seeking a Detection Engineer to join a small global team. You will help develop our threat detection model deck, respond to customer requests and incidents, and review cyber threat intelligence.

You will build new model decks for Endpoint and Kubernetes, analyze incidents, and collaborate with Development, Analyst and customer-facing teams while advancing internal tooling.